Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
File: HDRPEVl1lIgoU6eVgd0r94nusx8.mft (raw, json)
Hash identifier: HH8/edELPSU8QpFPU5Azz/iENMKBUr9ZGYVAFwIGbWA=
Subject key identifier: 18:10:CA:5A:B6:8A:BE:1A:8A:44:25:8C:3C:17:03:8C:B8:C9:FF:1F
Authority key identifier: 1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
Certificate issuer: /CN=1c344f11597594882853a79581dd2bf789eeb31f
Certificate serial: 01A0D83BA7A93CAB14882956D6FE75000C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
Manifest number: 1843
Signing time: Fri 25 Sep 2026 11:03:03 +0000
Manifest this update: Fri 25 Sep 2026 11:03:03 +0000
Manifest next update: Sat 26 Sep 2026 11:03:03 +0000
Files and hashes: 1: HDRPEVl1lIgoU6eVgd0r94nusx8.crl (hash: HwHLh/c18XtKRxr3RpISKBeTos46SVbe8iiGWlDXOzU=)
2: ZoMbhLRe32uOkMK8hwS9ali-Eqw.roa (hash: JRuU+ZyopWBcMt/8KJluZ75llM4qdJd/sZ4QglM1TbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:a7:a9:3c:ab:14:88:29:56:d6:fe:75:00:0c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c344f11597594882853a79581dd2bf789eeb31f
Validity
Not Before: Sep 25 11:03:03 2026 GMT
Not After : Sep 26 11:03:03 2026 GMT
Subject: CN=1810ca5ab68abe1a8a44258c3c17038cb8c9ff1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e9:cb:4c:05:fd:d1:17:ff:cc:7a:c5:c0:68:
ed:e9:ba:06:9f:77:84:b3:5a:60:73:d4:0c:7d:d4:
7f:53:07:d2:4f:b5:8e:f1:a1:80:e0:cd:6e:06:b8:
12:45:37:f5:61:69:82:a0:6e:a3:28:16:17:75:89:
9f:9f:69:84:11:35:bf:e6:16:0c:30:e5:9f:e2:3f:
21:77:be:75:66:2f:f0:de:e5:da:e6:6b:40:d6:a7:
c2:2f:dc:df:3b:f8:ca:94:22:04:d1:4d:16:e7:ca:
86:54:aa:c3:f3:5c:a1:f9:60:00:ce:05:a0:df:6e:
d0:5a:70:75:70:a3:bc:f4:39:23:3f:ce:67:75:6a:
e5:f0:02:0f:58:8c:6d:10:48:b6:e5:f3:6e:36:6e:
92:63:63:6a:30:3e:14:d3:67:cc:7d:67:c1:de:e7:
a3:d7:86:ff:49:4e:9e:4b:93:50:6a:27:4a:e2:5e:
06:e9:0f:16:ac:fe:11:e8:e8:a6:7c:94:3e:8b:da:
d5:00:53:94:e7:67:ce:6b:95:3e:8b:36:30:c8:28:
51:69:7c:bb:a2:83:03:81:2f:f1:fc:53:bf:7d:a7:
cc:18:ce:13:5d:56:db:06:75:31:44:b5:e3:da:56:
ad:ae:8a:06:b3:29:bd:0b:42:94:56:e4:56:13:4d:
80:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:10:CA:5A:B6:8A:BE:1A:8A:44:25:8C:3C:17:03:8C:B8:C9:FF:1F
X509v3 Authority Key Identifier:
keyid:1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:04:e5:34:9a:dd:f0:f6:76:2d:74:8b:62:b4:8d:b2:0b:31:
01:86:94:eb:7e:38:cd:99:ae:cd:45:e7:19:2e:9c:70:07:6a:
2a:97:a5:b1:01:e3:e9:95:47:b9:23:4a:03:f2:a0:8c:65:79:
8d:7e:97:01:1f:37:d7:e8:20:8a:6a:a9:27:7b:1e:bf:e8:de:
0e:da:d5:b5:5d:dd:a6:23:72:82:52:3a:0d:34:ba:81:d2:c1:
51:20:74:75:e3:a1:f4:99:ed:2d:e5:fb:93:8a:19:2d:73:5a:
26:dd:cf:de:91:ad:46:78:fc:87:90:99:cc:1c:81:75:39:7a:
73:38:2f:6d:32:26:57:a7:81:25:d1:37:3a:84:75:be:af:9b:
94:41:87:5c:59:ca:9a:4e:82:1b:23:26:32:5d:e8:fb:3f:d4:
28:e3:1a:0c:4b:0e:e9:e5:92:47:a7:eb:f9:6d:7b:b0:44:b7:
44:00:b5:81:86:00:7d:5d:0a:24:e6:0f:28:3e:30:ba:11:dd:
36:80:46:87:e1:4c:07:68:ef:a9:7b:bb:11:a8:e3:64:4e:ad:
fc:6f:df:04:3f:34:d5:13:6c:65:aa:76:c1:61:9e:78:af:a9:
eb:28:cd:17:de:19:4b:f0:ef:00:5a:6a:e0:be:a8:10:03:e1:
da:f0:b0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:49:06 2026 by rpki-client